Mortons Media Group Ltd Listed by blackbasta Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Mortons Media Group Ltd, a long-established UK printing and publishing firm, was listed on 8 March 2023 by the ransomware group known as blackbasta. Public reporting states that internal files were exfiltrated in a ransomware attack; the number of people affected remains unknown and further technical detail has not been disclosed.

The listing itself is a claim published by the group. No independent confirmation of the full scope or contents of any stolen data has been provided in the available record, so the precise impact on individuals and the organisation is still limited to what has been stated.

What happened

According to the reported summary, Mortons Media Group Ltd appeared on blackbasta’s leak site on 8 March 2023. The only concrete description given is that internal files were allegedly exfiltrated during a ransomware attack. No public figure has been released for the volume of data, the number of systems involved, or the exact date the intrusion began. Methods of initial access, dwell time, and whether a ransom demand was paid or refused are all undisclosed. The incident is therefore known chiefly through the group’s claim and the accompanying characterisation of the material as internal files.

Inside blackbasta

Blackbasta is a ransomware operation that became active in 2022 and has since been associated with double-extortion tactics: encrypting victim systems while also copying data and threatening to publish it if payment is not made. The group typically gains entry through compromised credentials, phishing, or exploitation of exposed remote-access services, then moves laterally before deploying its ransomware. It has listed organisations across manufacturing, professional services, healthcare and other sectors on its dedicated leak site. Listings are presented by the group as proof of successful intrusion; they remain unverified claims until corroborated by the victim or independent investigators. No statements attributed specifically to blackbasta about Mortons Media Group Ltd beyond the listing itself appear in the public record used for this account.

About Mortons Media Group Ltd

Mortons Media Group Ltd traces its origins to the Victorian era as a pioneer printer and publisher. The company states that printing and publishing remain at its core while it has expanded into websites, upgraded systems, and new products, services and events. Organisations of this type commonly hold customer and subscriber records, contributor and employee information, commercial contracts, production files and internal operational documents. A breach affecting such a firm therefore carries potential consequences for both the business continuity of a heritage media company and for any individuals whose details may reside in its systems.

The information in question

The available facts name the exposed material only as “internal files exfiltrated in ransomware attack.” No inventory of file types, no count of records, and no confirmation of personal data categories have been published. Media and publishing companies typically maintain databases of subscribers, advertisers, freelancers, staff and financial records; whether any of those categories were among the files taken in this incident is unconfirmed. Readers should treat the precise contents as unknown until further official disclosure occurs.

Why it matters

When internal files leave an organisation under ransomware conditions, the practical risks include possible misuse of any personal or commercial information that may have been present, disruption to ongoing publishing and printing operations, and the longer-term erosion of trust among customers, contributors and partners. Because the number of people affected is unknown and the exact data types remain undisclosed, individuals cannot yet determine with certainty whether they are personally implicated. For the company, recovery involves not only technical restoration but also the need to assess regulatory notification duties and to communicate clearly with those who may be affected once more information becomes available.

What to do if you're exposed

If you have had dealings with Mortons Media Group Ltd—as a subscriber, advertiser, contributor or employee—consider the following practical steps while official detail remains limited:

• Monitor financial and email accounts for unexpected activity and enable multi-factor authentication where available.
• Treat unsolicited messages that reference the company or the incident with caution; verify any request for personal information through official channels.
• Change passwords on accounts that may have shared credentials with services linked to the firm.
• Keep records of any suspicious contact and report confirmed fraud to the relevant authorities.
• Run a free exposure scan of your email address to check whether it has already appeared in known breach datasets.

Further updates from the company or from independent investigators will be needed before the full extent of exposure can be established. Until then, measured vigilance is the most useful response.

AICompiled with AI assistance from public sources and published under our editorial standards.